Purpose:

The Director, Risk & Compliance Strategy plays a critical role in strengthening procurement processes through strategic risk management, compliance adherence, and comprehensive audit strategies. The Director, Risk & Compliance is responsible for ensuring the deployment of strategies within the Risk & Compliance teams in addition to leading and coaching a team, ensuring their professional development aligns with organizational goals. This role demands a candidate with a robust background in enterprise risk management, including areas like IT security, procurement, cybersecurity, business continuity, quality, supplier management, and / or legal.   

Responsibilities

• Lead the enterprise procurement risk, audit, and compliance strategy, translating priorities into effective governance, controls, and assurance plans.
• Establish a procurement risk-management framework covering identification, assessment, mitigation, monitoring, escalation, and reporting.
• Lead the integration of Future-State AI tools (AI Risk Intelligence, Predictive Models, Monitoring Agents, and Copilot-Enabled Insights) to automate and optimize risk and compliance functions.
• Drive the PRAC 2026-2028 capability roadmap, shifting functional maturity from foundational monitoring to an “Anticipate & Orchestrate” (Risk), “Automate & Optimize” (Audit), and “Predict & Prevent” (Compliance) state.
• Implement continuous AI-led monitoring to shift compliance controls from detective to preventive, reducing recurring issues and enabling early identification of compliance weaknesses.
• Advance AI strategies to automate routine audit requests, exception tracking, and risk routing, enabling dynamic prioritization and proactive crisis response based on real-time data and predictive analytics.
• Design and oversee a risk-based audit program for procurement processes, supplier management, sourcing, contracting, purchasing, and payment controls; track corrective actions through closure.
• Ensure adherence to applicable laws, regulations, internal policies, ethical sourcing requirements, delegated authorities, and contractual obligations.
• Partner with Legal, Finance, Internal Audit, IT Security, Cybersecurity, Quality, and Business Continuity teams on cross-functional risks and controls.
• Oversee supplier and third-party risk management, including due diligence, risk segmentation, monitoring, remediation, and business-continuity considerations.
• Define compliance metrics, dashboards, and leadership reporting on material risks, audit findings, and control effectiveness.
• Lead investigations and remediation related to procurement compliance concerns, control failures, and audit findings.
• Develop policies, standards, training, and communications that reinforce compliant, ethical, and resilient procurement practices.
• Lead, coach, and develop the Risk & Compliance team in alignment with organizational goals.